Qt Blog

Security advisory: CVE-2026-13326 Out-of-bounds read and integer underflow vulnerability in QNdefNfcTextRecord impacts Qt NFC module.

Tero Pelkonen — Thu, 10 Sep 2026 13:12:50 GMT

An out-of-bounds read and integer underflow vulnerability in the QNdefNfcTextRecord class of the Qt NFC module (qtconnectivity) has been discovered and has been assigned the CVE id CVE-2026-13326.

Security advisory: CVE-2026-11573 QDomDocument::toByteArray() crashes when parsing svg file

Tero Pelkonen — Tue, 08 Sep 2026 11:07:14 GMT

An uncontrolled recursion (CWE-674) vulnerability in the Qt QDomDocument serialization path (QDomDocument::toByteArray(), QDomNode::save()) of the Qt XML module (QtXml, qtbase) has been discovered and has been assigned the CVE id CVE-2026-11573.

Qt Design Studio 4.8.3 Released

mahmoud.ali@qt.io (Mahmoud Ali) — Tue, 08 Sep 2026 10:51:26 GMT

Qt Design Studio 4.8.3 Is Here!

Qt Design Studio 4.8.3 is a maintenance release that builds on foundations of 4.8.2: a round of improvements to the Figma design workflow from both ends of the pipeline, fixes to property editing for Qt for MCUs projects, and a refreshed set of AI models.

Qt Bridge

The Qt Bridge importer now retains the settings from your last import, remembering both the import options and the path, so bringing in an updated design no longer means re-entering the target directory and re-picking your options every time. Alongside that, a handful of correctness fixes improve the QML that comes out of an import: colors are no longer added to plain Items, master components get proper default values for aliasing, inner attached property overrides are no longer propagated since QML does not support this, and imported UIID names no longer get an _instance suffix appended.

Qt AI Assistant Retires As We Invest in Agentic Development Tools

peter.schneider@qt.io (Peter Schneider) — Tue, 01 Sep 2026 06:55:00 GMT

The Way Developers Use AI Has Changed

When Qt AI Assistant was introduced, the state of the art in AI-powered software development was the single-turn prompt: select a block of code, ask for a test case, an explanation, or some boilerplate QML, and review the result.

Qt Extension 1.16.0 for VS Code Released

orkun.tokdemir@qt.io (Orkun Tokdemir) — Mon, 31 Aug 2026 14:24:29 GMT

We're excited to announce the release of version 1.16.0 of the Qt Extension for Visual Studio Code! This release brings:

QML Profiler and Trace Viewer to profile your QML applications directly from VS Code
A new Welcome page with browsers for Qt examples and Qt Academy courses
Better PySide support with QML Live Preview and uv virtual environments

Qt Safe Renderer 2.2.0 Released and Certified!

tarja.sundqvist@qt.io (Tarja Sundqvist) — Thu, 20 Aug 2026 10:12:16 GMT

We are happy to announce the release and certification of Qt Safe Renderer (QSR) 2.2.0! The QSR 2.2.0 release is available for commercial customers with a Device Creation Enterprise license.

Qt 6.11.2 Released

jani.heikkinen@qt.io (Jani Heikkinen) — Tue, 18 Aug 2026 10:02:10 GMT

Qt 6.11.2 is now available for download. As a patch release, Qt 6.11.2 doesn’t introduce new features, but it delivers around 400 bug fixes, security improvements, and quality enhancements on top of Qt 6.11.1. For a full overview of the most notable changes, take a look at the Qt 6.11.2 release notes.

Qt Creator 20.0.1 released

eike.ziller@qt.io (Eike Ziller) — Thu, 30 Jul 2026 09:31:12 GMT

We are happy to announce the release of Qt Creator 20.0.1!

The release improves tool detection and the default session directory for chats in the AI Agent Client Protocol integration, fixes various issues with CMake Presets as well as some crashes, and contains various other improvements.

Python Mobile App Development: Bringing PySide6 on iOS

Ece.Cinucen@qt.io (Ece Cinüçen) — Thu, 30 Jul 2026 09:26:05 GMT

Python mobile app development reaches iOS in Qt 6.12. PySide6 developers can ship native iOS apps from the same codebase they already use for Android and desktop, with no Swift or Objective-C rewrite and no second codebase to keep in sync.

Security advisory: CVE-2026-15037 - XML injection vulnerability in QDom comment, CDATA and processing-instruction serialization

Tuukka Kettunen — Thu, 23 Jul 2026 12:27:55 GMT

An XML injection (improper output neutralization) vulnerability in the Qt XMLQDom comment, CDATA section, and processing-instruction serialization of the Qt Framework (QtXml module) has been discovered and has been assigned the CVE id CVE-2026-15037.